Alertoscan
DOM

Genome Signature

DOM #23

Active Network: Nexus Syndicate
signature profile

Identical DOM structure hash detected across 9 domains indicates a cloned website template or shared codebase used to mass-produce scam sites. This forensic signal shows the attackers copied the same HTML/CSS layout framework across multiple domains to facilitate rapid deployment of fraudulent schemes.

Fingerprinta5c6a6b79c25d09d8cf84e693da7d6a02de3f0aef8b8cbc4c9680d74a27db572
Detections
9
Hash type
DOM structure
Status
Active
Last scanned
May 2026
detection timeline
1
2026-03
3
2026-04
5
2026-05

Detected domains

9

Related signals

7
BU

Build #26

Nexus Syndicate

Active
118
detections
FA

Favicon #42

Nexus Syndicate

Active
81
detections
FA

Favicon #50

Nexus Syndicate

Active
55
detections
BU

Build #70

Nexus Syndicate

Active
36
detections
BU

Build #66

Nexus Syndicate

Active
20
detections
BU

Build #55

Nexus Syndicate

Active
16
detections
BU

Build #60

Nexus Syndicate

Active
10
detections